GitHub topics: lsass

Repositories

fortra/nanodump

The swiss army knife of LSASS dumping

Language: C - Size: 14.9 MB - Last synced at: 6 days ago - Pushed at: 8 months ago - Stars: 1,926 - Forks: 250

ricardojoserf/TrickDump

Dump lsass using only NTAPI functions creating 3 JSON and 1 ZIP file... and generate the MiniDump file later!

Language: C# - Size: 615 KB - Last synced at: 14 days ago - Pushed at: 14 days ago - Stars: 452 - Forks: 51

bac123456789000/lsass-memory-scraping

The case illustrates the power of structured host-based triage — beginning with logs and EDR, and moving through file inspection, RAM capture, and finally, network artifact confirmation.

Language: Jupyter Notebook - Size: 31.3 KB - Last synced at: 18 days ago - Pushed at: 18 days ago - Stars: 0 - Forks: 0

ricardojoserf/NativeDump

Dump lsass using only NTAPI functions by hand-crafting Minidump files (without MiniDumpWriteDump!!!)

Language: C# - Size: 319 KB - Last synced at: 18 days ago - Pushed at: 18 days ago - Stars: 588 - Forks: 87

Compcode1/lsass-memory-scraping

The case illustrates the power of structured host-based triage — beginning with logs and EDR, and moving through file inspection, RAM capture, and finally, network artifact confirmation.

Language: Jupyter Notebook - Size: 40 KB - Last synced at: 19 days ago - Pushed at: 19 days ago - Stars: 0 - Forks: 0

JaroMarko/LSASS-Hash-Extractor

A Python tool to extract NTLM or SHA1 hashes from Mimikatz output, save them in sanitized files, and organize them into a specified directory.

Language: Python - Size: 0 Bytes - Last synced at: 2 months ago - Pushed at: 2 months ago - Stars: 0 - Forks: 0

CCob/MirrorDump

Another LSASS dumping tool that uses a dynamically compiled LSA plugin to grab an lsass handle and API hooking for capturing the dump in memory

Language: C# - Size: 836 KB - Last synced at: about 2 months ago - Pushed at: about 4 years ago - Stars: 262 - Forks: 60

jkerai1/WindowsHardeningScripts

Windows Hardening Powershell Scripts

Language: PowerShell - Size: 279 KB - Last synced at: 3 months ago - Pushed at: 3 months ago - Stars: 14 - Forks: 1

EvanDesR/removingLSASS_ProcessProtection

Kernelmode program removing LSASS.exe's processs protection allowing mimikatz and other memory dumpers to extract windows credentials.

Language: C++ - Size: 9.77 KB - Last synced at: 3 months ago - Pushed at: 3 months ago - Stars: 0 - Forks: 0

TheKingOfDuck/hashdump

Dumping Windows Local Credentials Tools/Tricks

Language: PowerShell - Size: 16.6 MB - Last synced at: about 1 month ago - Pushed at: about 5 years ago - Stars: 68 - Forks: 26

kindtime/nosferatu

Windows NTLM Authentication Backdoor

Language: C++ - Size: 964 KB - Last synced at: 4 months ago - Pushed at: 4 months ago - Stars: 234 - Forks: 46

A plugin for x64dbg that allows you to hook the Local Security Authority Subsystem Service process to extract all possible TLS(On handshake, Import, Export or Generate) keys from the operating system using the SeDebugPrivilege escalation to make malware analysis faster and easier.

Language: CMake - Size: 3.33 MB - Last synced at: 3 months ago - Pushed at: 11 months ago - Stars: 8 - Forks: 3

Hagrid29/DuplicateDump

Dumping LSASS with a duplicated handle from custom LSA plugin

Language: C# - Size: 8.11 MB - Last synced at: 6 months ago - Pushed at: about 3 years ago - Stars: 199 - Forks: 22

aas-n/spraykatz

Credentials gathering tool automating remote procdump and parse of lsass process.

Language: Python - Size: 21 MB - Last synced at: 6 months ago - Pushed at: almost 5 years ago - Stars: 753 - Forks: 122

okankurtuluss/LSASSExtractor

LSASSExtractor is a lightweight tool designed to capture memory dumps of the LSASS process on Windows systems. By leveraging the Windows API, it locates the target process and creates a memory dump, which can be analyzed to extract sensitive information such as passwords, encryption keys, and authentication tokens.

Language: C++ - Size: 350 KB - Last synced at: 9 months ago - Pushed at: 9 months ago - Stars: 0 - Forks: 0